NDIS Medication Management Requirements: A Provider's Guide

NDIS medication management requirements come down to one obligation: every participant who needs medication must be confident that their provider administers, stores and monitors it safely, and works to prevent errors. In the NDIS Practice Standards this is the Management of Medication outcome, and it applies to any registered provider responsible for giving medication to participants — most commonly Supported Independent Living (SIL), personal care and high-intensity support providers. Meeting it means having documented procedures, accurate medication records, secure storage, trained workers, and a clear process for when something goes wrong.

This guide sets out exactly what registered providers must have in place: the standard it sits under, who it applies to, the day-to-day obligations, the records an auditor will ask for, when a medication error becomes a reportable incident, and the training your workers need. It is written for provider owners and compliance managers who need to be audit-ready, not just compliant on paper.

Where medication management sits in the NDIS Practice Standards

Medication is covered by the Management of Medication outcome within the Provision of Supports Environment division of the NDIS Practice Standards Core Module. The Commission's wording is plain: each participant requiring medication is confident their provider administers, stores and monitors the effects of their medication, and works to prevent errors or incidents. Sitting under that outcome are three quality indicators an auditor assesses you against.

1. 1Records clearly identify each medication and its dosage and correctly identify the participant it belongs to.
2. 2Every worker who administers medication understands its effects and side effects, and knows the steps to take if a medication incident occurs.
3. 3Medications are stored safely and securely, are easily identified and differentiated, and are only accessed by appropriately trained workers.

A quick clarification, because it trips providers up: S1–S4 are the four divisions of the Core Module (S1 Rights and Responsibilities, S2 Governance and Operational Management, S3 Provision of Supports, S4 Support Provision Environment) — they are structural divisions, not incident-severity ratings. Medication management lives in the Support Provision Environment division alongside mealtime management and waste management. For higher-intensity or clinical medication tasks — such as administering insulin, subcutaneous injections or medication through an enteral (PEG) tube — you are also assessed against Supplementary Module 1: High Intensity Daily Personal Activities and its skills descriptors.

Who must meet these requirements?

The Management of Medication outcome applies to any provider responsible for administering medication to participants. In practice that captures:

• Supported Independent Living (SIL) providers, where staff routinely support participants with daily medication.
• Personal care and daily personal activities providers who assist participants to take medication.
• High-intensity support providers, whose workers must additionally meet the High Intensity Daily Personal Activities skills descriptors for complex medication tasks.

Whether the module applies to you is determined by your certificate of registration and registration groups, not by the size of your organisation. If your workers give, prompt or physically assist with medication in any way, these requirements apply. Providers delivering higher-risk supports like SIL should read this alongside our SIL compliance guide, which covers the wider set of standards these services must satisfy.

What providers must have in place

Meeting the standard is about systems, not good intentions. At a minimum, a registered provider administering medication should have all of the following:

• A documented medication management policy and procedure that reflects current legislation and is understood by staff.
• Accurate medication records — a medication administration record (MAR) or chart capturing the participant, medication, dose, route, time, and the initials of the worker who administered it.
• Safe and secure storage, with medications clearly identified, differentiated to prevent mix-ups, and accessible only to trained workers (with additional controls for Schedule 4 and Schedule 8 medicines).
• Monitoring of effects and side effects, so changes in a participant's condition are noticed and escalated.
• Support for self-administration where a participant chooses it and it is safe — the provider's role is to enable, not restrict, that right, backed by a risk assessment.
• PRN (as-needed) protocols obtained from the prescriber, setting out when and how a medication may be given.
• Participant consent, and a working interface with prescribers, GPs and pharmacists — including pharmacist medication reviews, which are recommended every three to six months where a participant is on multiple medications.

The rights of medication administration

Most provider training frameworks teach a set of checks staff run every time they give medication — commonly framed as the rights of medication administration: the right person, the right medication, the right dose, the right route, the right time, the right reason, and the right documentation. Frameworks vary (you will see five-, six- and seven-rights versions in different guidance), so the exact number is less important than the principle: build these checks into your procedure and your MAR so every administration is verified and recorded. It is a practical control, not a Commission-mandated statutory list, but auditors will expect to see verification checks embedded in how your workers operate.

Records, storage and the evidence auditors look for

At audit, an approved quality auditor tests whether your medication systems are actually used, not just written down. Have this evidence organised and current:

• Your medication management policy and procedure, version-controlled and in date.
• Completed medication charts/MARs showing name, dose, route, time and the administering worker's initials, with no unexplained gaps.
• PRN logs that record the reason each as-needed medication was given, against the prescriber's protocol.
• Refusal and non-administration records using clear codes, so missed doses are explained rather than blank.
• Medication-change records with the prescriber's instructions attached.
• Storage and access records, including how Schedule 8 medicines are secured and accounted for.
• Self-administration risk assessments for participants who manage their own medication.
• Worker training and competency records demonstrating each administering worker is assessed and current.

Because medication sits in the Support Provision Environment division, it is worth reviewing it alongside the rest of that division — our guide to NDIS Practice Standard S4 explains how the environment and safety indicators are assessed together.

When a medication error is a reportable incident

This is where providers most often get it wrong in both directions. A medication error is not automatically a reportable incident to the NDIS Commission. It becomes reportable only when it causes, or could have caused, death or serious injury (serious injury meaning harm requiring hospitalisation or medical treatment, or long-term harm). That said, every medication error and near-miss must still be recorded in your internal incident management system, reviewed, and used to improve practice — internal recording and external notification are two different obligations.

When an error does meet the reportable threshold, the notification timeframes are strict and run from when you became aware:

• Within 24 hours — death, serious injury, abuse or neglect, and unlawful sexual or physical contact; you lodge an immediate notification and follow up with the required detail.
• Within 5 business days — for the use of an unauthorised restrictive practice, unless it caused harm, in which case the 24-hour timeframe applies. Sedating a participant with medication that is not prescribed and authorised can constitute a chemical restraint and an unauthorised restrictive practice.

If you are unsure whether a given error crosses the line, our guide on reportable vs non-reportable incidents walks through how to make that call — and missing the notification window has consequences of its own.

Worker training and competency

The standard is explicit that only appropriately trained workers should administer medication. In practice that means:

• Every worker administering medication is trained and assessed as competent, and understands the medication's effects, side effects and the steps to take if an incident occurs.
• Workers hold a current NDIS Worker Screening Check — see our state-by-state breakdown of how screening works across VIC, NSW, QLD and beyond.
• For high-intensity supports, workers meet the relevant High Intensity Daily Personal Activities skills descriptors.
• Complex or clinical medication — insulin, subcutaneous injections, enteral-tube medication — requires additional specific training and a documented prescriber protocol before a worker performs it.

Common medication management mistakes

The non-conformances auditors see most often are avoidable with good systems:

• Incomplete or illegible medication charts, or gaps with no refusal/non-administration code.
• Giving PRN medication without a prescriber protocol on file.
• Storage that is unsecured, or where medications are not clearly differentiated.
• Workers administering medication without documented training and competency.
• No self-administration risk assessment for participants who manage their own medication.
• Recording errors internally but failing to escalate the ones that meet the reportable threshold — or, conversely, no internal record at all.

Frequently asked questions

Is medication management under S3 or S4 of the Practice Standards?

The Management of Medication outcome sits in the Support Provision Environment division (S4) of the Core Module, alongside mealtime and waste management. Higher-intensity and clinical medication tasks are additionally assessed under Supplementary Module 1: High Intensity Daily Personal Activities.

Can NDIS participants self-administer their own medication?

Yes. Where a participant chooses to manage their own medication and it is safe for them to do so, the provider's role is to support that choice, not restrict it. Best practice is to document a self-administration risk assessment and record the participant's decision, so the arrangement is clear and evidenced.

Do support workers need a qualification to give medication?

There is no single national certificate that authorises it, but workers must be trained and assessed as competent, understand the medication and its side effects, and hold a current NDIS Worker Screening Check. For high-intensity or clinical medication, workers must meet the relevant skills descriptors and follow a prescriber protocol. State and territory medicines and poisons laws also govern who may administer certain scheduled drugs, so check your jurisdiction's requirements.

Is every medication error reportable to the NDIS Commission?

No. A medication error is only a reportable incident if it caused, or could have caused, death or serious injury. All errors and near-misses must still be recorded and reviewed in your internal incident management system, even when they are not externally notifiable.

What medication records do we need to keep?

At minimum: a current medication policy and procedure, medication administration records/charts capturing participant, medication, dose, route, time and the administering worker, PRN logs with reasons, refusal and change records, storage and access records, self-administration risk assessments, and worker training and competency records.

The bottom line

NDIS medication management is not complicated in principle — administer the right medication safely, store it securely, record everything, train your people, and escalate the errors that matter. What catches providers out is letting the evidence drift between audits: charts with gaps, policies past their review date, PRN protocols missing from the file. Keep those systems tight all year and medication management stops being an audit risk.

AuditCore keeps that evidence continuously audit-ready — mapping your medication procedures and records to the NDIS Practice Standards, flagging gaps before an auditor does, so you can focus on safe support rather than paperwork.